Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/09263c-a5cc-44d6-91c4-61802d9c9344/1/lXbbt2mVtJUKhsXwfKjbPrSWePY.mft
File:                     lXbbt2mVtJUKhsXwfKjbPrSWePY.mft (raw, json)
Hash identifier:          Nbmh31VKQDuOhV1ey0Bjz/DmBfa9X5Q7js12SyC7W2I=
Subject key identifier:   28:2C:E9:99:FE:A6:55:4E:57:CA:09:5F:B6:22:AD:19:4D:09:B6:2D
Authority key identifier: 95:76:DB:B7:69:95:B4:95:0A:86:C5:F0:7C:A8:DB:3E:B4:96:78:F6
Certificate issuer:       /CN=9576dbb76995b4950a86c5f07ca8db3eb49678f6
Certificate serial:       01962F3DCDC13C986C8F2A5FC71611CC7E96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lXbbt2mVtJUKhsXwfKjbPrSWePY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/09263c-a5cc-44d6-91c4-61802d9c9344/1/lXbbt2mVtJUKhsXwfKjbPrSWePY.mft
Manifest number:          022A
Signing time:             Sun 13 Apr 2025 13:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:41 +0000
Files and hashes:         1: lXbbt2mVtJUKhsXwfKjbPrSWePY.crl (hash: gh1C7LBRhACdtRJIMzGglhHox3bBIhOIqGX2Eh7+uoY=)
                          2: wOkYAGqpSPBGigfUEv7El852HGA.roa (hash: jGAVgltAX4k1B+fH3k6Z7JMTyuIFNv8n6kIlzZB4Zww=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:cd:c1:3c:98:6c:8f:2a:5f:c7:16:11:cc:7e:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9576dbb76995b4950a86c5f07ca8db3eb49678f6
        Validity
            Not Before: Apr 13 13:01:41 2025 GMT
            Not After : Apr 14 13:01:41 2025 GMT
        Subject: CN=282ce999fea6554e57ca095fb622ad194d09b62d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:55:3b:b8:cf:bf:28:a0:b1:f9:de:20:7e:af:
                    17:79:fa:c5:37:37:04:97:fd:63:8b:c7:0e:7b:c9:
                    c4:7b:68:4b:32:b8:3c:ef:de:e0:24:b7:54:74:aa:
                    2b:1c:17:05:10:f8:0a:fb:fb:ce:69:e0:ae:9a:48:
                    2e:21:b4:0d:4c:02:9b:b5:b9:d7:57:33:04:78:bc:
                    bc:21:80:c7:03:f4:84:f9:98:7c:ad:b3:d8:10:ba:
                    7e:c8:d1:7e:da:59:e4:90:55:d6:e0:4f:ea:f3:ea:
                    e5:94:e3:2b:db:8b:b1:d6:b4:5e:be:d4:a5:0a:5f:
                    3c:46:3b:cb:35:41:be:5c:a0:14:87:36:16:45:a6:
                    32:94:69:d5:32:eb:cb:8b:d7:a1:fd:81:31:93:46:
                    cd:21:34:60:60:c4:9a:54:7d:3e:18:7b:3f:1a:3e:
                    d7:55:8e:c6:cd:a7:61:38:f7:0e:04:0f:e3:71:59:
                    87:09:69:ed:d9:f2:75:0e:df:b1:b9:c1:40:23:58:
                    0c:65:d4:b3:f7:13:d2:b4:eb:b8:c4:b5:34:8f:74:
                    82:08:5d:be:36:62:80:a2:6b:da:6a:94:64:5a:e5:
                    55:68:ff:39:b1:ee:51:8b:c9:dd:3e:52:ef:6e:99:
                    0a:08:0b:35:95:2b:10:a1:57:b5:32:c3:23:50:ed:
                    9b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:2C:E9:99:FE:A6:55:4E:57:CA:09:5F:B6:22:AD:19:4D:09:B6:2D
            X509v3 Authority Key Identifier:
                keyid:95:76:DB:B7:69:95:B4:95:0A:86:C5:F0:7C:A8:DB:3E:B4:96:78:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lXbbt2mVtJUKhsXwfKjbPrSWePY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/09263c-a5cc-44d6-91c4-61802d9c9344/1/lXbbt2mVtJUKhsXwfKjbPrSWePY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/09263c-a5cc-44d6-91c4-61802d9c9344/1/lXbbt2mVtJUKhsXwfKjbPrSWePY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:6d:82:b1:2b:b9:cb:f5:77:7b:74:61:66:c7:98:e7:17:81:
         f3:a1:db:50:98:4c:e2:20:5f:88:e9:b5:fc:76:a6:4c:49:09:
         19:da:98:34:0f:54:94:d9:db:89:53:4d:fe:bc:9c:44:1d:40:
         2c:9c:bf:c6:6a:2e:db:36:f9:da:f7:18:4e:d9:72:0f:4c:c8:
         78:0c:d5:e8:b4:fc:73:b3:f3:e8:22:f1:3d:00:31:8c:40:c5:
         01:fd:c9:df:89:2c:1d:a9:b9:2a:62:6a:4c:e3:97:b2:69:96:
         55:b5:cb:10:8a:4b:04:c4:4a:86:b8:fb:01:fd:a5:af:88:7a:
         05:b1:00:15:9d:c7:5a:0f:39:93:1a:3d:fb:6a:c2:2c:a5:c1:
         dd:2b:85:31:9a:91:75:f6:35:a9:3b:a5:69:00:e5:be:91:99:
         bb:6d:7a:d3:26:0b:99:d6:23:22:93:18:f4:2c:47:65:64:7d:
         3b:71:60:fd:1f:52:be:6e:fb:cc:10:4c:54:38:d2:1e:bd:89:
         54:4d:39:23:d8:d7:32:4c:4d:2a:18:d8:bf:f9:8b:45:9a:d7:
         32:4d:45:d4:e0:1b:30:c5:89:a6:6d:2b:c4:a5:c4:9d:0f:7b:
         29:51:61:db:f1:3c:b6:66:4d:63:78:92:b0:6e:d3:5d:a8:b5:
         8f:80:23:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----